Threat Modelling

Question 1

STRIDE

Answer 1

Spoofing
Tampering
Information Disclosure
Denial of Service
Elevation of Privileges

Question 2

CVE

Answer 2

Common Vulnerability Exposures

Question 3

Attack Tree

Answer 3

A conceptual diagram showing how an asset could be attacked
Child nodes must be true to make the Parent Condition correct

Question 4

PASTA

Answer 4

Process for Attack Simulation and Threat Analysis